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Abstract. We recall several cryptographic protocols based on entanglement alone 
and also on entanglement swapping. We make an exposition in terms of the geometrical 
aspects of the involved Hilbert spaces, and we concentrate on the formal nature of the 
used transformations. 


1. Introduction 

Entanglement has been widely exploited in the design of protocols and procednres for 
commnnication, cryptography and compntation within qnantnm contexts. Qnantnm 
codes guarantee that information has been transmitted without any alteration. 
Cryptographic protocols aid for key agreement of for secure communication, namely 
unconditionally secure information exchange. Entanglement has been used to implement 
and to speed-up paradigmatic quantum algorithms (Gisin, Ribordy, Tittel and Zbinden, 
2002; Lanyon, Weinhold, Langford, Barbieri, James, Gilchrist and White, 2007). 

Entanglement swapping may entangle two quantum systems without direct 
interaction among them, and this fact is exploited within several quantum cryptography 
schemes. 

Here, we recall several well known cryptographic protocols using entanglement, 
alone, and entanglement swapping: the Quantum Secure Direct Communication Protocol 
(see table [3] below) communicates securely bit strings with an even length, the Quantum 
Bidirectional Communication Protocol (see table 0] below) is a generalization of the 
above protocol in which the communicating parts exchange simultaneously messages 
of even bit length, the Quantum Multidirectional Communication Protocol (see table [8] 
below) allows the message exchange among three parts using the maximally entangled 
GHZ states, at table M we recall a three parties protocol in which two correspondents 
communicate securely just after the authorisation of a third party (who does not catch 
the message exchange), and hnally, the Key Agreement Protocol Using Entanglement 
Swapping is sketched at table [10] in order to illustrate the use of entanglement swapping 
in cryptographic protocols. 
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Table 1. Action of the Pauli operators on basis vectors 
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We emphasise the algebraic aspect of the Hilbert space nature of all the involved 
protocols. We establish a correspondence among unitary transforms, obtained as tensor 
products of Pauli maps, and permutations of basic vectors in the Hilbert spaces. These 
correspondence are summarised at tables [2] and [ 6 l Also, explicit expressions of the Bell 
basis, in terms of the Hadamard basis are given. 

For any two integer numbers i, j G Z"*", with i < j, let us write 

[bil = + 


2. Qubits and Pauli transforms 

Let Hi = be the two-dimensional complex Hilbert space. The unit sphere of Hi is 
the set of qubits. The canonical basis consists of the vectors Oq = [1 0]^ and ei = [0 1]^. 
Usually, it is written |0) = Oq and |1) = ei. Let ho = :^(|0) +11)) and hi = :^(|0) —11)) 
be the vectors forming the Hadamard basis at Hi. 

Let us consider the Pauli operators 



and let us number them as [cTo cxi (J 2 cts] = [cto a a; (Jy a^]. The action of these operators 
over the vectors at the canonical and the Hadamard basis is sketched at table [H At each 
entry is located the value of cxj at the vector labeling the corresponding column. We see 
that, up to a factor which is an unitary complex number, the canonical basis remains 
hxed by (Jq and and is switched by ai and (T 2 while the Hadamard basis remains hxed 
by (To and cri and is switched by cr 2 and (T 3 . Thus, the operator cr 2 is switching both 
basis. 

Let H 2 = Hi ( 8 ) Hi be the Hilbert space containing the 2-quregisters. Any 2- 
quregister x has two components xq and xi, each at the factor space Hi, they are 
qubits. Let for i,j e [0,1], 

bp = (|0^) + (-ly |H» , 
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Table 2. Correspondence on permutations of the Bell basis and tensor products of 
Pauli operators 
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here the overline denotes complement modulus 2. Then B = is the Bell 

basis of IHI 2 and consists of four maximally entangled states. In terms of the Hadamard 
basis, the Bell vectors are expressed as follows: 

boo = ^(ho (8) ho + hi 0 hi) 
v2 

boi = ^(hi 0 ho + ho 0 hi) 
v2 

bio = 0 ho - hi 0 hi) 

bn = -^(hi 0 ho - ho 0 hi) 

Any sequence C = (cfc)^>o whose terms are elements of B determines two sequences 
of qubits Co = {cko)k>o = (^fci)fc>o- 

Through the radix expression of an index in base 2, we may number the Bell basis as 
B = (bfc)^g|Q 22 _ij. The tensor products = ai®aj determine bijections Uij : B ^ B, 
such that 

V(z,j) e [0,3f Wk E [0,2^ - 1] ; a,,{hk) E £(b„^,(fc)). (2) 

Let A 2 : (Tjj I—)■ ttij be the map that associates to each tensor product cr^ the 
corresponding permutation that it dehnes at the Bell basis. The image of A 2 consists 
of just 4 = 2^ permutations (/d£)£g|o 23 - 1 ]) ^ind each permutation is dehned by 4 tensor 
products aij as summarized at the table E) the hrst column displays the index i, the 
second column the permutation fdi and the third column the list of tensor product maps 
aij producing /ft under the map A 2 . 

The table [2] can in turn be summarized as 

yi E [0,3] : A2(a'j_go(j)) = /Sq , A2{aig^(^i)) = /fi, 

^2(o‘j^i(i)) = /?2, ^2(o'i/32(i)) = /^3- (3) 

By looking at relation ([2]), we see that if i and k remain hxed, then the index j can be 
encoded by the value aij/k). This property can be exploited for secure communication 
purposes. 

In table [3] a Quantum Secure Direct Communication Protocol (Deng, Long and 
Liu, 2003) is sketched. The purpose of this protocol is to communicate securely a word 
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Table 3. Quantum Secure Direct Communication Protocol 


Alice 

Bob 

pads the message into a 

sequence by inserting the 


message into the positions at J 
codifies the message by 

calculating Di = 
sends Di through a quantum 

receives Di 

channel 

calculates Dq = (o-i(c^o))K=o) 

which actually com¬ 
pletes the calculation of 

D = 

calculates E by measuring each 
term at D with respect to the Bell 
basis 

recovers the sequence 


consequently 
the padded sequence and 

the original message 


in [0,3]*. Alice should communicate a message G [0,3]™. Alice and Bob fix 

a Pauli transform cTj, a Bell quregister G B, an integer n > m and an index set 
J G [0,n — 1]*^™^ They share initially a constant sequence C = (ck)"Io whose terms 
coincide with G B. 

Using sequences of entangled quregisters it is also possible to build bidirectional 
communication protocols. In table 0] a Quantum Bidirectional Communication Protocol 
is sketched (Gao Fei, 2008). The purpose of this protocol is to communicate securely 
two words in [0,3]*, one going from Alice to Bob and the other in the opposite direction. 
Alice and Bob should interchange messages in [0, l]^"", and they share initially a constant 
sequence C = (Ck)”“q. 

3. Entanglement swapping 

Entanglement swapping is a phenomenon which allows to put two particles into entangled 
states although these particles have not been close at any time. Departing from two pairs 
of entangled particles, a particle is chosen from each pair, then the joint pair of selected 
particles is measured with respect to the Bell basis, resulting in an entangled state. As a 
consequence, the pair consisting of the two partner particles is also entangled. This last 
pair is the result of the entanglement swapping beginning from the original two pairs. 

In two 2-quregisters there are involved 4 qubits, let us identify them with the four 
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Table 4. Quantum Bidirectional Communication Protocol 


Alice 

Bob 

by taking pairs of contiguous bits, 

by taking pairs of contiguous bits, 

she writes her message as a word 

he writes his message as a word 

e 10.31” 

(CC e 10.31” 

codihes her message by calculat- 

codihes his message by calculat- 

ing Do = ((Ti„(c^o))"=i 

ing Di = ((TjJc^i))'^Zo 

sends Dq through a quantum 
channel 

DQ^ ■ 7 -, 

— > receives Dq 

receives Di 

sends Di through a quantum 


channel 

for each k G [0, n — 1] she mea- 

for each k G [0, n—1] he measures 

sures the entangled quregister 

the entangled quregister with 

with respect to the Bell basis 

respect to the Bell basis 

since she knows i^, using (Ej), she 

since he knows using ([2]), he 

recovers 

recovers 


indexes in the integer interval [0,3]. Let us write \e)^, for e G {0,1}, p G [0,3], to 
denote the state of the /U-th qubit. For any two different indexes E [0,3], let the 
respective Bell basis of the Hilbert space IHI 2 be 




t6[0,l] 

Let us assume that the 2-quregister consisting of the qubits 0 and 1 is entagled as well 
as the pair of qubits 2 and 3. Then a basis of the space IHI 4 is 


B. 


{01){23) ^ '^iojohjl ^iojo ® J 




*0 ,iie[o,i] 


(4) 


where Vio, jo,ii, ji G [0,1]: 

mojonji 2 V 


|0«oOil)oi23 + I^*0 ^h)o123 + 


(-l)^'1l^00Zl>„,,3 + (-ir+^Hl^0lH>0423) • 


(5) 


By rearranging the pairs and considering the pairs (0,2) and (1,3), we have that a 
second basis of EI 4 is 


D _ I u(02) 

B(o 2){13) - ( b^oio 


I . 

/ 2i 


io,io,n,ii6[o,i] 


( 6 ) 


where Vio.io. Ji.ii 6 lO, 1]: 

hot’ ® } ( |OioOii)„ji3 + |Oioli7>„2i3 + 

(-1)” + (-!)«+'■ IlMi7>„2,3) . 
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By swapping the middle qubits, the following 4-quregisters result: ^io, joCi, ji G [0,1], 

yiojohji ~ 2 ( |00*0*l)oi23 

(-1)* + (-iy+« |lliS7>„,33) . (7) 

Each 2-quregister given by relation (|5]) can be expressed in terms of the 2- 

quregisters yioionii given by relation ([7]), namely: 

^*oionji 2 ( y*oio*iii ( 1) yiojonji^” 

I (_iyo+hy , , , , ) (g) 

\ J lojonji ^ V •7 7 ojo*iji/ ’ V 7 

and this relation is symmetric: 

y*oioiiii ~ 2 ^ '^iojohji d" (~ 1 ) '^iojohji^ 

In this way, the entanglement of the 4-registers z is reflected by the entanglement of the 
4-registers y, in other words, the entanglement of the pairs (0,1) and (2, 3) is swapped 
into the entanglement of the pairs (0,2) and (1,3), and conversely. 

4. Three-entanglement 

Let us consider multi-party bidirectional protocols. In particular, we will illustrate 
these procedures with three communicating parties. A proper protocol considers 
maximally entangled 3-quregisters, members of Ha = Hi $$ IHI 2 . Any 3-quregister x 
has three components xq, Xi and X 2 , each at the factor space Hi, they are qubits. For 
£i,£ 2,£3 e [ 0 , 1 ] let 

beieaea = (|0£ie2) + (“1)^® |1^1^)) • 

These vectors form a basis, S 3 , analogous to the Bell basis in H 3 , but they are called 
Greensberger-Horne-Zeilinger (GHZ) states. In terms of the Hadamard vectors, the 
GHZ states are expressed as shown at the table [5l 

Through the radix expression of an index in base 2, we may number the Bell basis 
as S 3 = (bfc)^gjg 23 _i]- The tensor products aijk = CTj ® aj G) ak determine bijections 
aijk : B 3 ^ B 3 in an analogous way as in ([ 2 ]): 

V(z, j, k) e [0, 3f e [0, 2^ - 1] : aijk{he) G £(b„,,,(£)). (10) 

Let A 3 : aijk t aijk be the map that associates to each tensor product aijk the 
corresponding permutation at the Bell basis. The image of A 3 consists of just 8 = 2^ 
permutations (/dAt)^g|o 23 - 1 ]’ permutation is dehned by 8 tensor products aijk as 

summarized in table [6l As seen at the beginning of section [ 2 l the operator a 2 switches 
the canonical and the Hadamard basis. Let us consider just operators of the form aijk 
where i G [0,3], j,k G {0,2}. Then, the restriction of table [6] to operators at the set 
S = {aijkl i G [0, 3|, A k G {0, 2}} is shown at tabled 
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Table 5. The GHZ states in terms of the Hadamard basis of qubits. 

booo = 2 (bo <8 (ho 0 ho + hi 0 hi) + hi 0 (ho 0 hi + hi 0 ho)) 

booi = ^ (hi 0 (ho 0 ho + hi 0 hi) + ho 0 (ho 0 hi + hi 0 ho)) 

boio = ^ (ho 0 (ho 0 ho - hi 0 hi) + hi 0 (-ho 0 hi + hi 0 ho)) 

bon = ^ (hi 0 (ho 0 ho - hi 0 hi) + ho 0 (-ho 0 hi + hi 0 ho)) 

bioo = ^ (ho 0 (ho 0 ho - hi 0 hi) + hi 0 (ho 0 hi - hi 0 ho)) 

bioi = ^ (hi 0 (ho 0 ho - hi 0 hi) + ho 0 (ho 0 hi - hi 0 ho)) 

biio = ^ (ho 0 (ho 0 ho + hi 0 hi) + hi 0 (-ho 0 hi - hi 0 ho)) 

bill = ^ (hi 0 (ho 0 ho + hi 0 hi) + ho 0 (-ho 0 hi - hi 0 ho)) 


Table 6. Correspondence on permutations of the Bell basis and tensor products of 
Pauli operators 
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In table[H]a Quantum Multidirectional Communication Protocol is sketched (Gao Fei, 
2008; Chong and Hwang, 2011). The purpose of this protocol is to communicate securely 
four classical bits, two emitted by Alice, one by Bob and another by Claire. By repeating 
the protocol the parties may exchange longer bit-strings. Alice, Bob and Claire should 
interchange four classical bits, two emitted by Alice, one by Bob and another by Claire. 
The parties share two GHZ states, Cq = Ci = G Ha with respective components 
Coo,Cio,C 2 o and Coi,Cii,C 2 i. The components Cqui Cifc, C 2 k are in possession of Alice, 
Bob and Claire respectively, k G [0,1]. The quregister Cq is a record of the initial state 
b£, while the quregister Ci is to be transformed during the protocol. 

Another bidirectional protocol (Zhong-Xiao and Yun-Jie, 2006) consists of three 
participants: Alice and Bob are the correspondents and Claire is the controller. The 
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Table 7. Correspondence on permutations of the Bell basis and tensor products of 
Pauli operators at the set S, in alphabetical order according to the first element at 
S n Observe that if one index i,jjk is known, the other two can be deduced 

form this index and the 3-quregister aijkihi). 
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{<^000, 0‘122} 

3 
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Table 8. Quantum Multidirectional Communication Protocol 

(i) The two bits of Alice determine an index Ia € [0,3]. She applies CTj^ to her 
qubit Coi- 

(ii) Bob applies either cto or a 2 to his qubit Cn according to the value of his bit. 

(iii) Claire applies either ao or a 2 to her qubit C 21 according to the value of her bit. 

(iv) They take a measure of the transformed quregister with respect to the Bell 
basis. 

(v) Using table [71 since each participant knows his/her own message, they recover 
the transmitted bits. 


correspondents are able to communicate only after the authorization of the controller, 
but their correspondence should be kept in secret against the controller. The protocol 
is sketched at table 1 Alice and Bob should interchange messages at [0,3]”* after the 
authorization granted by Claire. The parties share a constant sequence {cu)^Zl whose 
entries coincide with a GHZ initial state b^. The component sequence (coi/)”Zo> 
say for ease of explanation, is owned by Claire, the component sequence {ciu)^Zl by 
Alice and the component sequence (c 2 i.)]]Zq by Bob. 

A Key Agreement Protocol Using Entanglement Swapping is obtained (Gao, Guo, 
Wen and Zhu, 2010) as follows. Let be the Bell basis considering two qubits 

e [0,3], 

Let be two Bell 2-quregisters with respective components , cZ) and 

c(2)^ cZ). 

Alice may act on the pair = [c®, cZ), c^)] either by (Aq:) doing 

nothing or by (Ai:) swapping the middle qubits, obtaining thus cZ), cZ), cZ)]. 

Bob may act on the pair (cZ^), cZ^)) = [cZ)^ cZ), cZ), cZ)] either by (Bq-.) measuring 
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Table 9. Quantum Controlled Bidirectional Communication Protocol 

(i) Alice and Bob agree a set J C [0,n — 1] of m positions among the index set 

[0,m- 1], 

(ii) Alice codifies her message G [0,3]"*“^ by applying to her 

correspondent qubit with G J, and she applies arbitrary Pauli operators 
at her qubits with indexes not in J. Alice sends her codihed sequence to Claire. 

(iii) Bob codihes his message G [0,3]™“^ by applying to his 

correspondent qubit C 2 i/^, with G J, and he applies arbitrary Pauli operators 
at his qubits with indexes not in J. Bob sends his codihed sequence to Claire. 

(iv) Claire receives the component sequences and (c 2 i,^)”_q, and she 

measures the whole sequence with respect to the basis S 3 . She sends 

her results to Alice and Bob as an authorization to proceed the transaction. 

(v) Using the table | 6 l her knowledge of her own message and the index set J, Alice 
recovers Bob’s message {b^)'^~Q G [0,3]”^“^. 

(vi) Using the table El his knowledge of his own message and the index set J, Bob 

recovers Alice’s message G [0,3]”*“^. 


with respect to the Bell basis and measuring with respect to 

the Bell basis or (Si:) by measuring with respect to the Bell basis B^"^^ 

and measuring c®] with respect to the Bell basis 

If the chosen actions are (Aq, Bq) or (Ai, Si), the actions are said to be correlated, 
otherwise, they are anticorrelated. 

In the protocol, the agreed common key is the juxtaposition of the measures 
obtained at the positions in which correlated operators do occur. When looking for a 
greater efficiency it is possible to recover also not 4, for 2 bits at any block corresponding 
to an anti correlated operator. 
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